Cloud Engineer

Insight Global; Vancouver; On-site; CAD 68,000 - 92,000; Full time

Job summary

Insight Global in Vancouver is seeking an Identity & Access Management Engineer to design, implement, and maintain IAM solutions using SAML, OAuth2, and OpenID Connect across internal and external apps.

You will manage RBAC, PAM, Conditional Access, MFA in Azure/Entra ID, and integrate IAM into CI/CD with DevOps; 6+ years of cloud engineering/security and strong Azure experience are required.

Qualifications

• 6+ years of experience in Cloud Engineering, DevOps, and/or Security with hands-on IAM responsibilities.
• Expertise with EntraID
• Scripting experience (Powershell, Python)
• Strong Microsoft Azure experience (AWS a plus)
• Deep understanding of IAM principles, authentication/authorization models, and security best practices.
• Hands-on experience with SAML, OIDC, OAuth2; RBAC and PAM; Conditional Access; user/group lifecycle management.
• Proven ability in using JIRA and Confluence in agile/DevOps environments.

Responsibilities

• Design, implement, and maintain IAM solutions using SAML, OAuth2, and OpenID Connect to support applications.
• Configure and manage RBAC and PAM to ensure least privilege access across cloud resources.
• Implement Conditional Access policies, MFA strategies, and identity protection controls in Azure AD/Entra ID.
• Oversee group and user lifecycle management with alignment to security, compliance, and audit requirements.
• Build and support IAM-related cloud infrastructure and Azure-based integrations (AWS experience a plus).
• Develop automation using Azure Automation, Logic Apps, scripting, and IaC to reduce manual effort and risk.
• Support cloud Windows, Linux, and SQL environments where identity integrations are required.
• Collaborate with DevOps and application teams to embed identity and security controls into CI/CD pipelines.

Skills

IAM principles

Cloud engineering

DevOps collaboration

Security best practices

Education

Bachelor's degree or diploma in CS/IT/Cyber Security

Tools

SAML

OIDC

OAuth2

RBAC

PAM

Azure

Entra ID

Azure Automation

Logic Apps

PowerShell

Python

JIRA

Confluence

Job description

Key Responsibilities:

Identity & Access Management Engineering

• Design, implement, and maintain IAM solutions using modern identity standards including SAML, OAuth2, and OpenID Connect (OIDC) to support internal and external applications.
• Configure and manage Role Based Access Control (RBAC) and Privileged Access Management (PAM) solutions to ensure least privilege access across cloud resources.
• Implement and manage Conditional Access policies, MFA strategies, and identity protection controls within Azure AD / Entra ID.
• Oversee group and user lifecycle management, ensuring alignment with security, compliance, and audit requirements.
• Build and support IAM related cloud infrastructure and integrations primarily in Microsoft Azure (AWS experience considered a strong asset)
• Develop automation using Azure Automation, Logic Apps, scripting, and Infrastructure as Code principles to reduce manual effort and operational risk.
• Support cloud based Windows, Linux, and SQL environments where identity integrations or access controls are required.
• Collaborate with DevOps and application teams to embed identity and security controls into CI/CD pipelines and deployment processes.

Security, Compliance & Best Practices

• Apply strong knowledge of IAM and cloud security best practices to protect enterprise systems and data.
• Participate in security reviews, audits, and risk assessments related to identity and access controls.
• Troubleshoot complex identity related incidents, performing root cause analysis and implementing long term corrective actions.

REQUIRED SKILLS AND EXPERIENCE

• Bachelor’s degree or diploma in Computer Science, Information Technology, or Cyber Security preferred; equivalent industry experience and certifications will be considered.
• 6+ years of experience in Cloud Engineering, DevOps, and/or Security, with hands on IAM responsibilities.
• Expertise with EntraID
• Scripting experience (Powershell, Python)
• Strong, demonstrable experience with Microsoft Azure (AWS experience is a plus).
• Deep understanding of Identity and Access Management principles, authentication and authorization models, and security best practices.
• Hands on experience with:
• SAML, OIDC, OAuth2
• RBAC and Privileged Access Management (PAM)
• Conditional Access policies
• User and group lifecycle management
• Strong experience using JIRA and Confluence in an agile or DevOps oriented environment.
• Proven ability to rapidly learn and apply emerging cloud, security, and IAM technologies.

NICE TO HAVE SKILLS AND EXPERIENCE

• AI or Non-human identity knowledge

Starting Rate: $58/hr

Please Note: We may use artificial intelligence tools to assist with the screening, assessment, or selection of potential applicants for this position.